Global Security Architect — Secure by Design & Cloud IAM

Infront Financial Technology GmbH; Madrid; On-site; EUR 90,000 - 140,000; Full time

Job summary

Infront Financial Technology GmbH in Madrid seeks a Global Security Architect to integrate security into its financial technology products. You will own authentication, encryption, secrets handling, and secure service-to-service communication, and align the Secure Development Standard and pipelines with continuous scanning.

You will lead threat modelling, define identity architecture across enterprise providers and product platforms, govern cloud security across multi-account AWS and Azure, and

Qualifications

• Substantial experience designing security into software products.
• Hands-on security design: threat modelling, OWASP-aligned secure coding, SAST, SCA in CI/CD.
• Cloud security architecture across AWS and Azure with multi-account governance.
• Identity and access architecture: enterprise identity providers, SSO, OAuth/OIDC, product auth platforms like Keycloak.
• Cryptography in practice: key/certificate management.
• Ability to influence engineers without line authority; know when patterns are mandatory.
• Fluent English is a must.
• Familiarity with OWASP, SAST, SCA, CI/CD,Cloud security, AWS, Azure, OAuth, OIDC.

Responsibilities

• Own reference security patterns for product security: auth, encryption, secrets handling, logging, and secure service communication.
• Publish and maintain Secure Development Standard and gates in build/deploy pipelines with automated scanning.
• Lead threat modelling and security design reviews for new products and changes.
• Be the technical lead for identity architecture across the estate including enterprise identity provider and product auth platforms.
• Own security architecture for the cloud estate across AWS accounts and Azure tenants.
• Coordinate Security Champions across product areas and translate regulatory expectations into engineering decisions.
• Contribute the application-layer input to vulnerability prioritisation and testing scoping.

Skills

Security architecture

Threat modelling

Secure coding

CI/CD security

Cloud security

Identity management

Encryption & key management

SAST/SCA

Influencing engineers

Fluent English

Tools

Keycloak

SAST

SCA

CI/CD tooling

Job description

Infront Financial Technology GmbH in Madrid seeks a Global Security Architect to integrate security into its financial technology products. You will own authentication, encryption, secrets handling, and secure service-to-service communication, and align the Secure Development Standard and pipelines with continuous scanning.

You will lead threat modelling, define identity architecture across enterprise providers and product platforms, govern cloud security across multi-account AWS and Azure, and